After adding DKIM signatures on outgoing email, I needed DKIM verification of incoming mail. Reading up I found that version 2.6.0 of amavisd-new includes direct support for DKIM, instead of using the DKIM plug-in in SpamAssassin.